Crypto hacks top $768M in September, worst month of 2026
Crypto hacks top $768M in September, making it 2026's worst month for thefts. CertiK estimated $768.4 million across 97 incidents, while PeckShield tallied $766.5 million from 55 major cases. The Bitget breach and Liquid Network exploit drove most of the damage. The spike is a stark reminder that exchange and network security failures can erase hundreds of millions in days, a theme tracked across Fintech & Crypto Alerts.
Key Takeaways
- September losses hit about $766.5M–$768.4M, the highest monthly total of 2026 so far.
- Bitget's $388M breach and Liquid Network's $320M exploit drove most of the damage.
- More than $270M from the Liquid Network case was later returned, per reports.
- CertiK has logged 656 security incidents in 2026 totaling $2.68 billion in losses.
- Smaller hits included Safe Wallet ($7.8M), DCENT ($6M), and Duelbits ($5.9M).
How large were September's crypto hack losses?
According to Cointelegraph reporting on blockchain security firm data, crypto suffered its worst month of 2026 for hacks and exploits in September.
PeckShield counted 55 major incidents and $766.5 million in stolen funds. CertiK recorded 97 incidents and put losses at $768.4 million. Both firms said the totals rose sharply from August.
CertiK's security dashboard shows 656 incidents year-to-date in 2026, with combined losses of $2.68 billion. In a Wednesday statement, CertiK called September "a stark reminder of how quickly the threat landscape can shift."
Which breaches accounted for most of the $768M?
Two outsized events dominated the month. The Bitget breach alone was reported at $388 million. A separate Liquid Network exploit was valued at $320 million.
Together, those cases accounted for most of September's losses. Reports also said more than $270 million from the Liquid Network incident was later returned, trimming the lasting impact of that exploit.
The incidents rank among the largest crypto thefts of the year. Beyond the headline pair, September also saw smaller but still material losses at Safe Wallet ($7.8 million), DCENT ($6 million), and Duelbits ($5.9 million).
Why do crypto hacks top 768m matter for traders now?
Concentrated exchange and blockchain infrastructure failures can move markets and freeze user confidence even when some funds are later recovered. September's scale shows how a handful of incidents can redefine a year's risk narrative overnight.
The timing also coincides with wider industry caution. Separately this week, MetaMask said it was investigating an undisclosed security incident affecting part of its infrastructure and exiting affected Ethereum validators as a precaution, while reporting no immediate threat to wallets.
For retail and institutional users alike, the takeaway is operational: custody choices, withdrawal hygiene, and platform due diligence remain as material as price charts after a month when crypto hacks top 768m in aggregate losses.